Login Request a demo
GI
Vendor
Gitea
4 products with CVEs on record
220
CVEs
1
On KEV
78
New 30D
Products
GI
Gitea
Gitea
9.8
131 CVEs1 on KEV77 new
GR
Gitea Runner
Gitea
8.8
1 CVEs0 on KEV1 new
GO
Gitea Open Source Git Server
Gitea
9.8
87 CVEs0 on KEV0 new
AC
act_runner
Gitea
9.9
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-97859
GI
Gitea
Gitea
6.5
0%
Oct 18Gitea API disclosure of private user social graph, keys and stars
CVE-2026-97204
GI
Gitea
Gitea
3.1
0%
Oct 18Gitea label deletion across repository and organization IDs
CVE-2026-110494
GI
Gitea
Gitea
6.3
0%
Oct 18Gitea release attachment re-linking of issue attachments
CVE-2026-110324
GI
Gitea
Gitea
6.5
0%
Oct 18Gitea private profile information disclosure through POST request
CVE-2026-110311
GI
Gitea
Gitea
4.3
0%
Oct 18Gitea draft release creation disclosing attachment metadata
CVE-2026-109844
GI
Gitea
Gitea
4.3
0%
Oct 18Gitea watched repositories API disclosure after access revocation
CVE-2026-107686
GI
Gitea
Gitea
4.3
0%
Oct 18Gitea reactions accepted on locked issues and comments
CVE-2026-107618
GI
Gitea
Gitea
–
0%
Oct 18Gitea cross-site request forgery on repository topics
CVE-2026-105964
GI
Gitea
Gitea
6.5
0%
Oct 18Gitea Actions artifact v4 API unbounded request body
CVE-2026-105661
GI
Gitea
Gitea
5.3
0%
Oct 18Gitea panic on the repositories route of individual users
CVE-2026-109553
GI
Gitea
Gitea
7.5
0%
Oct 18Gitea SSH certificate principal impersonation of other users
CVE-2026-104627
GI
Gitea
Gitea
5.4
0%
Oct 18Gitea OpenID account linking without session binding
CVE-2026-78433
GI
Gitea
Gitea
5.9
0%
Oct 14Gitea private attachment disclosure through repository mismatch
CVE-2026-78231
GI
Gitea
Gitea
5.3
0%
Oct 14Gitea blind SSRF through OpenID assertion verification
CVE-2026-73814
GI
Gitea
Gitea
6.5
0%
Oct 14Gitea repository ownership escalation by administrators
CVE-2026-73804
GI
Gitea
Gitea
8.1
0%
Oct 14Gitea API token scope escalation through HTTP signatures
CVE-2026-73802
GR
Gitea Runner
Gitea
8.8
0%
Oct 14Gitea Runner host isolation bypass through container options
CVE-2026-73800
GI
Gitea
Gitea
8.8
1%
Oct 14Gitea reusable workflow secret exposure in pull_request_target
CVE-2026-73539
GI
Gitea
Gitea
7.5
0%
Oct 14Gitea external renderer argument injection and code execution
CVE-2026-73535
GI
Gitea
Gitea
8.8
0%
Oct 14Gitea second-factor bypass through OpenID identity linking
CVE-2026-73273
GI
Gitea
Gitea
4.3
0%
Oct 14Gitea Maven checksum upload quota bypass and memory exhaustion
CVE-2026-73135
GI
Gitea
Gitea
5.3
0%
Oct 14Gitea hidden-owner repository listing disclosure
CVE-2026-73130
GI
Gitea
Gitea
4.3
0%
Oct 14Gitea repository initialization resource exhaustion
CVE-2026-73126
GI
Gitea
Gitea
4.3
0%
Oct 14Gitea private workflow badge token scope bypass
CVE-2026-71301
GI
Gitea
Gitea
4.3
0%
Oct 14Gitea private pull request title disclosure through markup
CVE-2026-71184
GI
Gitea
Gitea
8.8
0%
Oct 14Gitea fork workflow approval bypass through review events
CVE-2026-70407
GI
Gitea
Gitea
4.3
0%
Oct 14Gitea organization listing token scope bypass
CVE-2026-70406
GI
Gitea
Gitea
6.5
0%
Oct 14Gitea private comparison disclosure with public-only tokens
CVE-2026-70402
GI
Gitea
Gitea
5.8
0%
Oct 14Gitea local code execution through writable Git hooks
CVE-2026-70400
GI
Gitea
Gitea
5.4
0%
Oct 14Gitea private migration creation with public-only tokens
CVE-2026-70396
GI
Gitea
Gitea
5.4
0%
Oct 14Gitea organization repository creation token scope bypass
CVE-2026-68964
GI
Gitea
Gitea
4.3
0%
Oct 14Gitea restricted-user SSH and GPG key metadata disclosure
CVE-2026-68957
GI
Gitea
Gitea
4.3
0%
Oct 14Gitea restricted-user issue search disclosure
CVE-2026-67577
GI
Gitea
Gitea
4.3
0%
Oct 14Gitea restricted-user activity and heatmap disclosure
CVE-2026-66877
GI
Gitea
Gitea
8.1
0%
Oct 14Gitea fork workflow approval bypass through concurrency cancellation
CVE-2026-66874
GI
Gitea
Gitea
6.5
0%
Oct 14Gitea required Actions check bypass through skipped workflows
CVE-2026-66853
GI
Gitea
Gitea
4.3
0%
Oct 14Gitea restricted-user organization metadata disclosure
CVE-2026-66849
GI
Gitea
Gitea
4.3
0%
Oct 14Gitea restricted-user package visibility bypass
CVE-2026-63792
GI
Gitea
Gitea
5.3
0%
Oct 14Gitea private reusable workflow disclosure to fork runs
CVE-2026-63021
GI
Gitea
Gitea
6.5
1%
Oct 14Gitea Swift package manifest memory exhaustion
CVE-2026-62925
GI
Gitea
Gitea
6.5
1%
Oct 14Gitea Alpine package parsing memory exhaustion
CVE-2026-60021
GI
Gitea
Gitea
6.5
1%
Oct 14Gitea GitLab migration denial of service
CVE-2026-60018
GI
Gitea
Gitea
6.5
1%
Oct 14Gitea OneDev migration denial of service
CVE-2026-60010
GI
Gitea
Gitea
6.5
0%
Oct 14Gitea organization team policy bypass through repository API
CVE-2026-60008
GI
Gitea
Gitea
3.5
0%
Oct 14Gitea Jupyter notebook UI redress through CSS class injection
CVE-2026-59774
GI
Gitea
Gitea
9.8
28%
Oct 14Gitea Org-mode file disclosure and code execution
CVE-2026-59766
GI
Gitea
Gitea
4.3
0%
Oct 14Gitea private repository metadata disclosure after access revocation
CVE-2026-25946
GI
Gitea
Gitea
5.3
0%
Oct 14Gitea OpenID discovery server-side request forgery
CVE-2026-97626
GI
Gitea
Gitea
4.3
0%
Oct 6Gitea profile feed disclosure bypassing user visibility
CVE-2026-96594
GI
Gitea
Gitea
6.1
0%
Oct 6Gitea repository media API stored XSS
CVE-2026-89182
GI
Gitea
Gitea
5.4
0%
Oct 6Gitea push-to-create bypass of FORCE_PRIVATE policy
CVE-2026-105268
GI
Gitea
Gitea
4.3
0%
Oct 6Gitea issue attachment API allows changing comment attachments
CVE-2026-105267
GI
Gitea
Gitea
8.1
0%
Oct 6Gitea tag delete route deletes releases without release permission
CVE-2026-104633
GI
Gitea
Gitea
6.5
0%
Oct 6Gitea migration memory exhaustion from zero page size
CVE-2026-101023
GI
Gitea
Gitea
9.1
0%
Oct 6Gitea OAuth2 refresh token grant accepts access tokens
CVE-2026-97208
GI
Gitea
Gitea
4.9
0%
Oct 6Gitea push mirror API bypass of DISABLE_NEW_PUSH policy
CVE-2026-86684
GI
Gitea
Gitea
7.1
0%
Oct 6Gitea push mirror local path check uses the repository owner
CVE-2026-73278
GI
Gitea
Gitea
9.8
0%
Oct 6Gitea WebAuthn bypass during OAuth and OIDC sign-in
CVE-2026-96589
GI
Gitea
Gitea
4.3
0%
Oct 6Gitea private repository access retained after rejected transfer
CVE-2026-96580
GI
Gitea
Gitea
7.5
0%
Oct 6Gitea Actions memory exhaustion through large static matrices